
$ rpki-client -vvf rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
File: twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft (raw, json)
Hash identifier: 4XhD3yzY/MQg7bUfgM0eryaEc9UU6zA+JanuHqWluAc=
Subject key identifier: 0C:94:D5:43:42:18:80:F7:78:58:E8:01:90:C1:D2:32:4F:BB:64:F8
Authority key identifier: B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
Certificate issuer: /CN=A917576D/serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Certificate serial: 0A9F
Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
Manifest number: 0A66
Signing time: Mon 02 Mar 2026 19:32:27 +0000
Manifest this update: Mon 02 Mar 2026 19:32:27 +0000
Manifest next update: Mon 09 Mar 2026 19:32:27 +0000
Files and hashes: 1: twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl (hash: USlwgCnYpQvPrLgYQ2bphsaAYXgSwvhietV9wlTwvQM=)
2: 7DE09496DDD911EA90D9B84CC4F9AE02.roa (hash: 2SRueJuk/oI2Z3RrQ/efGcxSLtCYpUo5HpcBPACZQGM=)
3: EA7554AC82D011EA8BCCCA64C4F9AE02.roa (hash: swz+w1wHJ+NqyAfABnU3GcK3MY2a0AE7eky2WFH3BSE=)
4: C9E62876DD0A11EA97BF0347C4F9AE02.roa (hash: 8H0BV2UOGEWlzpdVFnm9AduIVjsTukqf5Aie6oiai8g=)
5: 4D3CA5D082D211EAB2F4F66AC4F9AE02.roa (hash: TH0pbEZTfFk/7QKlIYRFfHi6YWc6EnwN0PyoqfHcpyU=)
6: F8C86248AAF711EAB266AB46C4F9AE02.roa (hash: qimocfWgJO+7SVIx0Qj7RIltIvyJVQrbiJ35MnQnqvk=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 09 Mar 2026 15:22:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2719 (0xa9f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A917576D, serialNumber=B70318D71AA0E804324E013C3097FDBCD60134D4
Validity
Not Before: Mar 2 19:32:27 2026 GMT
Not After : Mar 9 19:32:27 2026 GMT
Subject: CN=69a5e5cb-2176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:f0:68:c8:37:47:ea:8e:1c:59:df:d2:46:
dc:c8:7d:39:88:b5:3c:ac:08:14:ad:8f:a1:c0:87:
cd:3c:82:58:ab:bd:04:47:3e:e6:ea:12:03:9a:12:
26:e5:8f:5d:ea:ee:17:d0:5d:a4:e3:c2:3f:35:85:
c7:aa:e4:2b:ae:e4:20:15:78:57:8a:42:3d:83:4d:
23:82:2a:31:b4:26:bf:48:f0:f9:8e:99:34:7a:97:
fb:1c:ad:2d:40:69:7e:fe:0b:35:d5:cb:54:c0:cf:
23:98:e0:9a:aa:81:b9:c6:4a:58:5a:61:7a:dc:35:
9d:55:bd:4f:fd:0d:fb:a5:7e:de:3c:18:e0:5d:29:
1b:63:cd:51:3c:7f:2c:9d:8c:e7:e7:c2:8f:54:c8:
b8:d7:f3:4a:79:d7:67:7f:ed:01:5c:16:d2:06:06:
d0:1e:3e:33:b4:99:f4:b4:2a:02:e9:6d:d3:69:da:
58:a8:83:2b:9e:3c:30:fb:c7:51:08:9d:6e:21:eb:
b5:d4:79:7a:07:86:da:c0:b6:c2:4b:0d:29:ae:55:
42:50:99:71:88:37:aa:06:09:8a:9c:7f:75:c0:9a:
bb:3d:84:63:26:4d:4e:c7:08:97:3b:d0:5e:76:21:
32:57:00:87:fb:99:cc:b0:cf:f9:70:72:99:44:bf:
c9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:94:D5:43:42:18:80:F7:78:58:E8:01:90:C1:D2:32:4F:BB:64:F8
X509v3 Authority Key Identifier:
keyid:B7:03:18:D7:1A:A0:E8:04:32:4E:01:3C:30:97:FD:BC:D6:01:34:D4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/twMY1xqg6AQyTgE8MJf9vNYBNNQ.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917576D/2E767E3282CD11EA895C7B5CC4F9AE02/twMY1xqg6AQyTgE8MJf9vNYBNNQ.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
86:98:54:97:41:4a:4a:00:71:57:f5:4f:43:d3:9c:52:2b:4a:
4d:a3:7b:79:66:90:a6:9e:fa:ba:74:97:7a:47:06:88:f3:d1:
dc:d8:13:c9:5f:99:67:89:bb:f1:3d:cc:d4:8c:8e:0b:c3:b8:
49:7c:52:e1:df:fe:4b:0d:4b:3a:82:bf:75:ee:0c:28:f1:00:
ab:cf:cc:f7:f2:cb:cb:2c:4a:f4:9e:02:4c:75:12:68:08:11:
37:bc:13:41:1c:a5:20:33:4c:7f:56:95:c1:08:4c:90:33:56:
ed:d1:f2:49:71:6a:bb:bd:88:29:61:bf:bb:d6:fb:09:4c:7b:
a7:d9:16:56:1d:f4:f5:7c:ce:4d:97:cf:fc:29:7e:d5:22:ff:
56:78:5f:8f:cc:c3:85:44:c6:dc:ef:48:0e:17:ad:8a:44:47:
e7:ea:ea:9f:1b:55:3a:d4:7f:c8:ed:10:42:a2:e4:9f:98:29:
69:a2:44:eb:4f:7e:a8:5d:0c:8e:14:7a:0b:f0:09:00:b1:c0:
4b:37:07:c6:b5:14:b8:f5:df:c2:2c:e8:5d:cd:ee:59:2f:f3:
17:09:85:64:47:fe:06:6b:9a:76:f0:35:19:fd:d8:77:c9:49:
c7:9b:cc:3e:62:a3:91:54:86:f6:ac:f9:bf:0b:b5:07:b9:bf:
9f:44:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 02:43:16 2026 by rpki-client